[SECURITY] Fedora 23 Update: activemq-5.6.0-12.fc23

The most popular and powerful open source messaging and Integration Patterns server...

CVE-2015-3858

The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application...

CVE-2015-3858: Undefined Security Weakness

The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS short-code messaging via a crafted application...

Firefox 41 integrates Free Built-in Instant Messaging and Video Chat to Your Browser

Mozilla launches Voice and Video Connect with the release of Official Firefox 41.0 Release. After significant improvements done in the Firefox Nightly experimental build of version Firefox 41.0, the stable release has a lot to offer. How would it be experiencing a seamless communication – video a...

Microsoft Lync Server XSS

The vulnerability of Microsoft Lync Server’s messaging server exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code through a specially crafted URL...

Buffer Overflow Vulnerability in Multiple TIBCO Products

TIBCO Rendezvous is a middleware product that helps users rapidly build and deploy large-scale distributed applications; Substation ES is a substation product that integrates communication software and provides real-time information exchange; Messaging Appliance is a suite of messaging software...

CVE-2015-4555

The provided documents specify a buffer overflow in the HTTP management interfaces of TIBCO Rendezvous products (Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, Messaging Appliance before 8.7.2). The root cause is an overflow in the HTTP administrative...

CVE-2015-3269

Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services LCDS 3.0.x before 3.0.0.354170, 4.5 before 4.5.1.354169, 4.6.2 before 4.6.2.354169, and 4.7 before 4.7.0.354169 and other products, allows remote attackers to read arbitrary files via an AMF message containin...

CVE-2015-3269: Exposure of Sensitive Information to an Unauthorized Actor

Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services LCDS 3.0.x before 3.0.0.354170, 4.5 before 4.5.1.354169, 4.6.2 before 4.6.2.354169, and 4.7 before 4.7.0.354169 and other products, allows remote attackers to read arbitrary files via an AMF message containin...

Google Android SMS and MMS Message Tampering Vulnerability

Google Android is an open source operating system based on Linux, mainly used in portable devices. A security vulnerability exists in Google Android, which allows malicious applications to exploit the vulnerability to tamper with the sending and receiving status of SMS and MMS messages to carry o...

How To Use WhatsApp Web Client on iPhone and Other iOS Devices

WhatsApp Web client support is now available for iOS users. That's right, now iOS users can access their instant messaging facility on the web; without taking the other route via jailbreaking. Eight months ago, on January 21, 2015, WhatsApp was made available on web browsers, and let Android,...

CVE-2015-4299

Cisco Unified Web and E-Mail Interaction Manager 9.02 improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCuo89046...

CVE-2015-4299

Cisco Unified Web and E-Mail Interaction Manager 9.02 improperly performs authorization, which allows remote authenticated users to remove default messaging-queue system folders via unspecified vectors, aka Bug ID CSCuo89046...

Multiple Storage-based Cross-site Scripting Vulnerabilities in Shenzhen Yifa Everlasting Yifa Cloud OA System

Yifa cloud OA office software integrates the most advanced management ideas, standardized management and value-added utilization of workflow, information flow and knowledge management to provide users with an advanced and efficient information work platform. The system is completely designed with...

Adobe LiveCycle Data Services Hotfix

Adobe is today expected to push a hotfix through to implementations of its LiveCycle Data Services application framework. The company said the vulnerability, CVE-2015-3269, affects versions 4.7, 4.6.2, 4.5 and 3.0.x on Windows, Macintosh and UNIX systems. Adobe is not aware of public exploits of...

OpenText Secure MFT 2014 R2 SP4 Cross Site Scripting

Advisory ID: SYSS-2015-041 Product: Secure MFT Vendor: OpenText Affected Versions: 2013 R1, 2014 R1, 2014 R2 Tested Versions: 2014 R2 SP4 Vulnerability Type: Cross-Site Scripting CWE-79 Risk Level: Medium Solution Status: Fixed Vendor Notification: 2015-08-05 Solution Date: 2015-08-14 Public...

Sen. Warren Worried About Banks' New Encrypted Messaging Platform

UPDATE–The list of politicians in Washington wringing their hands over the increasing use of encryption by consumers and businesses is growing longer by the day. Sen. Elizabeth Warren added her name to that list on Monday. Warren D-Mass. sent a letter to Attorney General Loretta Lynch expressing...

WhatsApp, Viber and Skype Internet Calls may No Longer be FREE in India

We all are aware of Net Neutrality and the recent controversies over it in India. Net Neutrality is simply the Internet Freedom — Free, Fast and Open Internet for all. India has been battling for Net Neutrality since zero-rating services such as Facebook’s Internet.org and Airtel Zero were...

Cisco ASR Denial of Service Vulnerability (CNVD-2015-04675)

The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A denial-of-service vulnerability exists in the Cisco ASR 5000 Series Messaging Data Network Gateway, which could be exploited by a remote attacker to submit a...

Microsoft Windows Kernel CVE-2015-2367 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to disclose kernel memory addresses and obtain sensitive information that may aid in further attacks. Note: This issue was previously titled 'Microsoft Windows Kernel...